DRSHOPS

Privacy Policy

1. Data Controller

The data controller responsible for data processing on this website is:

Nlend Ngom Emmanuel Ulrich
34 rue Victor Basch
91300 Massy, France
Email: contact@drshops.com

2. What Data We Collect

We may collect the following categories of personal data:

  • Identity data: first name, last name
  • Contact data: email address, postal address, phone number
  • Transaction data: details of products you have purchased from us
  • Technical data: IP address, browser type and version, time zone setting, browser plug-in types, operating system
  • Usage data: information about how you use our website and products
  • Marketing data: your preferences in receiving marketing communications

3. How We Collect Your Data

We collect personal data through:

  • Direct interactions: when you create an account, place an order, subscribe to our newsletter, or contact us
  • Automated technologies: as you interact with our website, we may automatically collect technical data about your equipment, browsing actions, and patterns

4. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds under the GDPR:

  • Contract performance (Art. 6(1)(b) GDPR): processing necessary for the performance of a contract with you (e.g., processing orders)
  • Consent (Art. 6(1)(a) GDPR): where you have given clear consent for us to process your personal data (e.g., newsletter subscription)
  • Legitimate interests (Art. 6(1)(f) GDPR): processing necessary for our legitimate interests, provided these are not overridden by your rights
  • Legal obligation (Art. 6(1)(c) GDPR): processing necessary to comply with a legal obligation

5. How We Use Your Data

We use your personal data for the following purposes:

  • To process and deliver your orders
  • To manage your account and relationship with us
  • To send you marketing communications (with your consent)
  • To improve our website, products, and services
  • To comply with legal obligations

6. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Order data is retained for a minimum of 5 years to comply with French commercial law.

7. Your Rights Under the GDPR

Under the General Data Protection Regulation, you have the following rights:

  • Right of access – You can request a copy of the personal data we hold about you
  • Right to rectification – You can request correction of inaccurate or incomplete data
  • Right to erasure – You can request deletion of your personal data in certain circumstances
  • Right to restrict processing – You can request that we limit how we use your data
  • Right to data portability – You can request transfer of your data in a structured, machine-readable format
  • Right to object – You can object to our processing of your personal data
  • Right to withdraw consent – Where we rely on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at contact@drshops.com.

8. Cookies

Our website uses cookies to distinguish you from other users and to provide you with a better browsing experience. We use only essential cookies necessary for the functioning of our website (e.g., shopping cart functionality). These do not require consent under GDPR as they are strictly necessary for the service you have requested.

9. Third-Party Services

We may share your data with trusted third-party service providers who assist us in operating our website, conducting our business, or servicing you. These third parties are contractually obligated to keep your data confidential and use it only for the purposes we specify.

10. Data Security

We have implemented appropriate technical and organisational measures to secure your personal data against accidental loss, unauthorised access, alteration, or disclosure. We limit access to your personal data to those employees, agents, and partners who have a business need to know.

11. Supervisory Authority

If you believe that our processing of your personal data violates data protection regulations, you have the right to lodge a complaint with the supervisory authority. In France, the supervisory authority is:

Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07
France
Website: www.cnil.fr

12. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Last updated: March 2026